$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cdc373f2-7aee-4c17-9b33-e9d993543374/24ec6956-edcc-36c7-8c93-631582aff06f.roa File: 24ec6956-edcc-36c7-8c93-631582aff06f.roa (raw, json) Hash identifier: owdhOgIlCE0OnvG1DqtH6mke1QrPj874MQzHMXKNceI= Subject key identifier: FF:98:D1:EB:34:E8:30:4D:66:40:02:29:73:CF:D5:55:E6:B5:66:C0 Certificate issuer: /CN=cdc373f2-7aee-4c17-9b33-e9d993543374 Certificate serial: 010D0C9F4328584913AC1B2016D957337F2008F0 Authority key identifier: 4D:A6:67:E7:20:18:14:B4:1D:6F:2D:DD:D9:9C:D6:BA:8A:D7:C3:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cdc373f2-7aee-4c17-9b33-e9d993543374.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cdc373f2-7aee-4c17-9b33-e9d993543374/24ec6956-edcc-36c7-8c93-631582aff06f.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 400079 IP address blocks: 204.48.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cdc373f2-7aee-4c17-9b33-e9d993543374/cdc373f2-7aee-4c17-9b33-e9d993543374.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cdc373f2-7aee-4c17-9b33-e9d993543374/cdc373f2-7aee-4c17-9b33-e9d993543374.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cdc373f2-7aee-4c17-9b33-e9d993543374.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:1b:20:16:d9:57:33:7f:20:08:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdc373f2-7aee-4c17-9b33-e9d993543374 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=2bcf685f-77de-4869-a861-998edf076749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:85:ce:fd:b2:44:7f:94:2d:92:29:dc:3f:9c: f8:31:3e:54:9e:13:19:f2:73:ab:13:55:b0:d3:c6: d3:0a:7d:04:d3:6f:4e:cd:01:ca:e9:a0:e9:41:44: a7:03:db:b9:36:58:f0:01:30:9e:70:10:b1:e7:0c: a2:65:39:93:fc:a5:1c:7b:b3:38:f4:8a:69:28:c1: e8:4c:ac:6c:52:38:71:46:05:c1:4a:fe:b8:9b:2b: 1e:ac:d4:ae:36:4d:e3:17:bd:9a:ed:f4:ae:89:fc: 89:e5:05:7a:03:86:a1:1e:1e:63:47:d1:91:fb:d0: 6b:5c:2c:98:79:d8:fe:9d:a4:e1:69:6f:f5:24:33: a1:d6:b2:8f:78:46:92:41:dc:fb:4f:39:3a:be:90: 80:e5:7e:76:1d:41:88:a1:53:55:05:9a:79:02:f2: 5e:42:06:fd:51:1c:5e:cc:8c:69:48:22:f3:dd:28: ca:c5:95:76:73:b7:94:66:0f:04:64:8c:ea:dd:68: 34:d3:23:f2:e5:63:c7:5f:e5:e2:60:6f:91:bb:5a: ae:70:4a:f6:b1:59:2a:9c:9d:25:90:7f:bb:1a:ec: 59:b2:36:18:29:d3:7e:bf:da:3f:c8:6c:ca:67:a4: e5:2c:d5:e2:9b:1e:b1:a7:82:a2:6f:fc:06:36:bc: d7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:98:D1:EB:34:E8:30:4D:66:40:02:29:73:CF:D5:55:E6:B5:66:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cdc373f2-7aee-4c17-9b33-e9d993543374/24ec6956-edcc-36c7-8c93-631582aff06f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cdc373f2-7aee-4c17-9b33-e9d993543374/cdc373f2-7aee-4c17-9b33-e9d993543374.crl X509v3 Authority Key Identifier: keyid:4D:A6:67:E7:20:18:14:B4:1D:6F:2D:DD:D9:9C:D6:BA:8A:D7:C3:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cdc373f2-7aee-4c17-9b33-e9d993543374.cer sbgp-ipAddrBlock: critical IPv4: 204.48.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:78:39:fc:11:52:7a:9b:9e:c1:e1:50:e1:28:fa:45:bf:bd: f4:6d:51:b2:f9:de:1d:cd:b3:cb:45:f1:80:62:6b:f8:a6:76: ba:01:69:b8:17:0e:59:7a:35:81:d6:b3:e1:7e:f4:29:64:c4: 02:c0:e8:6c:ec:01:46:71:be:a5:00:43:78:46:ab:0c:e7:0e: e3:60:83:f9:29:96:7e:81:b4:f7:21:87:fa:ff:e0:5a:d6:65: 30:22:17:90:dc:97:4f:05:4c:6d:f2:99:13:aa:65:67:83:62: 23:b9:c7:4d:11:2c:9f:f3:79:46:cb:21:db:78:73:21:18:e9: 3a:e8:a3:cc:e6:66:be:69:3c:c3:3f:10:d6:fc:73:e4:92:cb: 5b:46:a8:ef:a4:6e:cf:a3:4c:b3:df:0b:01:08:d1:aa:d4:06: 09:06:84:e4:a1:a0:4f:f2:93:00:75:65:ae:30:23:72:b3:39: f2:8d:fd:b5:6e:c0:58:f0:ac:76:e1:42:b5:c6:0f:1c:94:a0: cf:af:f2:43:74:f5:dd:51:70:9f:d9:8e:71:a5:3f:31:cf:c9: 16:25:cf:4e:3a:1c:25:7d:97:e9:f8:3f:23:0b:8c:6a:64:a8: 58:3e:c3:b3:ec:1b:1f:f0:5e:a7:ca:57:58:e5:c3:da:0a:99: 9d:2d:43:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrBsgFtlXM38gCPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2RjMzczZjItN2FlZS00YzE3LTliMzMtZTlkOTkzNTQz Mzc0MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk MmJjZjY4NWYtNzdkZS00ODY5LWE4NjEtOTk4ZWRmMDc2NzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoXO/bJEf5QtkincP5z4MT5UnhMZ8nOrE1Ww 08bTCn0E029OzQHK6aDpQUSnA9u5NljwATCecBCx5wyiZTmT/KUce7M49IppKMHo TKxsUjhxRgXBSv64myserNSuNk3jF72a7fSuifyJ5QV6A4ahHh5jR9GR+9BrXCyY edj+naThaW/1JDOh1rKPeEaSQdz7Tzk6vpCA5X52HUGIoVNVBZp5AvJeQgb9URxe zIxpSCLz3SjKxZV2c7eUZg8EZIzq3Wg00yPy5WPHX+XiYG+Ru1qucEr2sVkqnJ0l kH+7GuxZsjYYKdN+v9o/yGzKZ6TlLNXimx6xp4Kib/wGNrzXIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+Y0es06DBNZkACKXPP1VXmtWbAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZGMz NzNmMi03YWVlLTRjMTctOWIzMy1lOWQ5OTM1NDMzNzQvMjRlYzY5NTYtZWRjYy0z NmM3LThjOTMtNjMxNTgyYWZmMDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2RjMzczZjItN2FlZS00YzE3LTli MzMtZTlkOTkzNTQzMzc0L2NkYzM3M2YyLTdhZWUtNGMxNy05YjMzLWU5ZDk5MzU0 MzM3NC5jcmwwHwYDVR0jBBgwFoAUTaZn5yAYFLQdby3d2ZzWuorXw94wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZGMzNzNmMi03YWVlLTRjMTctOWIzMy1lOWQ5 OTM1NDMzNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzDA9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEl4OfwRUnqbnsHhUOEo+kW/vfRtUbL53h3Ns8tF8YBia/imdroBabgX Dll6NYHWs+F+9ClkxALA6GzsAUZxvqUAQ3hGqwznDuNgg/kpln6BtPchh/r/4FrW ZTAiF5Dcl08FTG3ymROqZWeDYiO5x00RLJ/zeUbLIdt4cyEY6Troo8zmZr5pPMM/ ENb8c+SSy1tGqO+kbs+jTLPfCwEI0arUBgkGhOShoE/ykwB1Za4wI3KzOfKN/bVu wFjwrHbhQrXGDxyUoM+v8kN09d1RcJ/ZjnGlPzHPyRYlz046HCV9l+n4PyMLjGpk qFg+w7PsGx/wXqfKV1jlw9oKmZ0tQ3c= -----END CERTIFICATE-----Generated at Thu Apr 10 19:34:11 2025 by rpki-client